VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, April 2020 Edition

Krebs on SecurityApr 15, 2020 · 00:00 UTC (Apr 15, 2020)4 min read5 · 3 reads

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-1020 CVE-2020-0938 CVE-2020-1027 CVE-2020-0968 CVE-2020-0796

Tags: cve-2020-1020 cve-2020-0938 cve-2020-1027 cve-2020-0968 cve-2020-0796 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-0796	Unauthenticated RCE in Microsoft SMBv3 (SMBGhost)	10.0	100%	KEVRansomwarePoC ×2	Mar 12, 2020 KEV Feb 10, 2022
CVE-2020-1020 +2 related CVEs CVE-2020-0938 CVE-2020-1027	Out-of-Bounds Write RCE in Microsoft Windows Adobe Font Manager Library	8.8 group max	65%	KEV	Apr 15, 2020 KEV Nov 3, 2021
CVE-2020-0968	Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine	7.5	31%	KEVRansomware	Apr 15, 2020 KEV Nov 3, 2021

From the original article

4 min read at krebsonsecurity.com

Microsoft today released updates to fix 113 security vulnerabilities in its various Windows operating systems and related software. Those include at least three flaws that are actively being exploited, as well as two others which were publicly detailed prior to today, potentially giving attackers a head start in figuring out how to exploit the bugs.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.